Amazon
Security Incident Response Engineer, Security Posture Improvement and Resilience Engineering
$159K–$213K
Seattle, WA +2 · Full-time · Posted Sep 16, 2026
- Location
- Seattle, WA
Irvine, CA
San Francisco, CA - Experience
- 3+ years of information security and compliance experience, or Bachelor's degree in a listed technical field or equivalent.
- Education
- Bachelor's degree in computer science, engineering, analytics, mathematics, statistics, or IT, or equivalent; preferred B.S. or M.S. in a related technical discipline.
About the job
The Security Incident Response Engineer coordinates investigations and response to security incidents across Twitch, improves defenses, and builds automations for security operations.
What you'll do
- Qualify alerts, assess incident impact, analyze threat actor tactics, and coordinate response with affected teams.
- Document incidents, communicate timelines and response actions, and lead lessons learned to reduce recurrence.
- Investigate, document, and implement agentic automations for detection, enrichment, triage, response, and communication.
What they ask for
- 3+ years of information security and compliance experience, or a Bachelor's degree in a listed technical field or equivalent.
- Automation experience with Go, Python, Ruby, Shell, or Perl.
- Experience coordinating security incident responses and knowledge of security issues and the threat landscape.
- Background in cloud, host, network, and application security; familiarity with incident response frameworks or lifecycle models.
Nice to have
- B.S. or M.S. in Computer Science, Computer Engineering, Software Security, or a related technical discipline.
- Experience with streaming and content creation, or handling incidents in hybrid cloud environments (AWS, GCP) and analyzing CloudTrail telemetry.
Pay
USD 159,300.00 - 202,400.00 annually (base salary, Irvine); USD 166,600.00 - 212,800.00 annually (base salary, San Francisco); USD 159,300.00 - 202,400.00 annually (base salary, Seattle)
Tools
Go, Python, Ruby, Shell, Perl, AWS, GCP, CloudTrail
AI focus
Design and implement AI/ML-driven playbooks to automate common security operations; investigate and implement agentic automations for detection, enrichment, triage, response, and communication.
Model-written summary · the original posting is authoritative